Security audit
Green Screen Cutout Assets
Security checks for vulnerabilities and agentic risk
Overview
The skill artifacts are coherent operational guidance for ClawHub and Convex work, with sensitive actions disclosed and gated by user confirmation or existing CLI authentication.
Appropriate for ClawHub maintainers or operators who understand the admin CLI impact. Before installing, be aware that moderation and email workflows can change production-facing ClawHub state when explicitly run, and autoreview can send code diffs to selected AI review engines; avoid including secrets in review bundles and keep confirmation gates enabled for destructive or public actions.
Vulnerability Patterns
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
- Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Static analysis
No suspicious patterns detected.